> Employees can easily access the user's data and impersonate any account<p>At every decent sized company I've worked for, topics like production data privileges, data classification (public, sensitive, confidential, etc.), data masking, and data anonymization for testing have been top priorities. And these policies are sometimes a true pain in the ass for developers, but they exist for a good reason.<p>I guess you shouldn't miss the timing to go from "move fast and break things" to "ok we're now a serious business".